{"command":{"effect":"write","timeoutSeconds":30,"inputSchema":{"type":"object","description":"**This endpoint allows you to authenticate a domain.**\n\nIf you are authenticating a domain for a subuser, you have two options:\n1. Use the \"username\" parameter. This allows you to authenticate a domain on behalf of your subuser. This means the subuser is able to see and modify the authenticated domain.\n2. Use the Association workflow (see Associate Domain section). This allows you to authenticate a domain created by the parent to a subuser. This means the subuser will default to the assigned domain, but will not be able to see or modify that authenticated domain. However, if the subuser authenticates their own domain it will overwrite the assigned domain.","properties":{"headers":{"type":"object","properties":{"on-behalf-of":{"type":"string","description":"The `on-behalf-of` header allows you to make API calls from a parent account on behalf of the parent's Subusers or customer accounts. You will use the parent account's API key when using this header. When making a call on behalf of a customer account, the property value should be \"account-id\" followed by the customer account's ID (e.g., `on-behalf-of: account-id <account-id>`). When making a call on behalf of a Subuser, the property value should be the Subuser's username (e.g., `on-behalf-of: <subuser-username>`). See [**On Behalf Of**](https://docs.sendgrid.com/api-reference/how-to-use-the-sendgrid-v3-api/on-behalf-of) for more information."}},"required":[],"additionalProperties":false},"body":{"type":"object","properties":{"domain":{"type":"string","description":"Domain being authenticated."},"subdomain":{"type":"string","description":"The subdomain or custom return-path to use for this authenticated domain."},"username":{"type":"string","description":"The username associated with this domain."},"ips":{"type":"array","description":"The IP addresses that will be included in the custom SPF record for this authenticated domain.","items":{"type":"string"}},"custom_spf":{"type":"boolean","description":"Specify whether to use a custom SPF or allow SendGrid to manage your SPF. This option is only available to authenticated domains set up for manual security."},"default":{"type":"boolean","description":"Whether to use this authenticated domain as the fallback if no authenticated domains match the sender's domain."},"automatic_security":{"type":"boolean","description":"Whether to allow SendGrid to manage your SPF records, DKIM keys, and DKIM key rotation."},"custom_dkim_selector":{"type":"string","description":"Add a custom DKIM selector. Accepts three letters or numbers."},"region":{"type":"string","description":"The region of the domain. Allowed values are `global` and `eu`. The default value is `global`."}},"required":["domain"],"examples":[{"domain":"example.com","subdomain":"news","username":"john@example.com","ips":["192.168.1.1","192.168.1.2"],"custom_spf":true,"default":true,"automatic_security":false,"custom_dkim_selector":"string","region":"global"}]}},"required":[],"additionalProperties":false},"name":"Authenticate a domain","id":"sendgrid.domain_authentication.authenticatedomain","example":{},"maxRequests":1,"summary":false}}